{"id":4015401,"url":"https://alion.io/job/aidoc-senior-application-security-engineer","title":"Senior Application Security Engineer","company":{"id":4324,"name":"Aidoc","domain":"aidoc.com","url":"https://alion.io/company/aidoc","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":95,"open_postings":30,"ghost_share":0,"stale_share":0,"repost_share":0.033,"time_to_fill_p50_days":73,"computed_at":"2026-11-10T06:52:35Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tel Aviv, Israel"],"countries":["IL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":".NET","optional":false},{"name":"AI Agents","optional":false},{"name":"C#","optional":false},{"name":"Go","optional":false},{"name":"JavaScript","optional":false},{"name":"LLM","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-11-10T08:43:19Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-10T12:25:21Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"About Aidoc\nAidoc is the market leader in healthcare AI and has developed the world's largest clinical frontier model, supporting nearly 50 million patients each year.\nAidoc is deployed in more than 2,000 medical centers worldwide. Since our founding in 2016, Aidoc has raised over $500 million and achieved a record number of FDA-cleared solutions.\nMedical diagnosis is hitting a breaking point, where the number of physicians hasn't kept up with the rapidly growing patient load. This leads to misdiagnosis and treatment delays that result in hundreds of thousands of deaths every year. Aidoc assists clinicians by precisely highlighting diseases directly on medical images, preventing misdiagnosis and ensuring that urgent patients receive the immediate attention they need.\nSenior Application Security Engineer\nJoin our existing R&D Security team as Aidoc's first dedicated Application Security Engineer. You will shape how application security works across R&D: choosing effective controls, building useful security tooling, and helping engineers adopt secure practices. You will work with security leadership, SecOps, product teams and engineers. Our products span Python services, web applications, desktop applications, mobile apps, and Aidoc servers in hospitals.\nWhat you will do?\nLead threat modeling and security reviews across services, web, desktop, mobile and hospital applications. Focus on customer and hospital data isolation and medical-file handling.\nReview Python and JavaScript/TypeScript code and test applications and APIs. Turn findings into practical requirements, help developers resolve them, and verify fixes, including testing for bypasses.\nImprove SAST, DAST, SCA and secrets controls across the development workflow. Work with DevOps and developers to reduce noise and make results actionable.\nBuild security automation, CI integrations and validation tests. Create reusable guidance and help teams adopt standards through design discussions, code reviews and developer coaching.\nDefine security requirements and verify controls for clinical inference, training pipeline code and model artifacts with AI and Data Engineering.\nAssess developer AI tools, including coding assistants, AI agents and Model Context Protocol (MCP) integrations, for sensitive-data exposure, excessive tool permissions and untrusted inputs.\nValidate application risks, recommend remediation priorities, track agreed work and measure adoption and recurring defects. Support SecOps investigations and provide technical evidence to Quality and Regulatory partners.\nResponsibilities\n5+ years of relevant experience in Application Security, Product Security, or a combination with software engineering.\nBuilt or substantially improved an AppSec program: selected priorities, introduced or improved tooling, gained developer adoption without formal authority, and measured results.\nConfident security review of Python and JavaScript/TypeScript, especially authorization and tenant isolation; hands-on web and API testing.\nExperience threat modeling and assessing systems you did not design, and translating findings into changes engineers can implement.\nAbility to write security automation, CI integrations and validation tests.\nWorking knowledge of security risks in LLM applications, AI agents and MCP integrations, including prompt injection, sensitive-data exposure and tool permissions.\nClear communication in English and sound judgment when explaining security trade-offs and guiding engineering teams.\nRequirements \nElectron, mobile or Windows-hosted application security; C#/.NET, PowerShell or Go.\nDeeper security experience with ML training pipelines, model artifacts or inference systems.\nHealthcare integrations, patient-data protection or regulated product development.\nYou can develop expertise in our additional platforms and healthcare domain here. Your AppSec judgment and record of making a program work matter most.\nOur Perks:\nBe part of something big - using cutting-edge technologies to transform the Healthcare industry (while saving patients’ lives)\nWe work in a hybrid model, with our new offices located at 34 HaMasger Street in Tel Aviv and parking for employees.\nAmazing and healthy breakfasts and lunches prepared daily by our personal chef!\nStocked up kitchen & meal card\nWellness: Aidoc employees-only gym, plus Pilates, Yoga, and functional workouts classes.\nAmazing culture - collaborative, transparent & fun!\nAttractive compensation package & benefits\nAidoc is deeply committed to creating an inclusive workplace, and to the principle of equal opportunity for all individuals. We prohibit discrimination and harassment based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other status protected by law.","description_format":"text","description_chars":4816,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Israel","iso":"IL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Computer Vision","Medical Imaging Systems","Medical AI"],"lifecycle":[{"event":"open","at":"2026-11-10T12:25:21Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":73,"reasons":["conf:3","win:early"],"computed_at":"2026-11-10T16:04:07Z"},"pay":null,"html_url":"https://alion.io/job/aidoc-senior-application-security-engineer","json_url":"https://alion.io/job/aidoc-senior-application-security-engineer.json","meta":{"generated_at":"2026-11-10T16:04:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2970,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4324},"rest":"https://alion.io/mcp/rest/get_company?id=4324"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Faidoc-senior-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Faidoc-senior-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Faidoc-senior-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/aidoc-senior-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Faidoc-senior-application-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4015401}},{"tool":"search_jobs","arguments":{"company":"aidoc.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4015401},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}